Do Son OpenAI is reportedly developing a text/audio-to-music AI generator and is collaborating with students from The Juilliard School to train its models.
Dan Agbo
Sergei Beliachkov, who managed security for 7,000+ users as a virtual CISO and later launched the service...
Google Gemini's Canvas workspace now uses AI to automatically generate presentation slides from a prompt or uploaded documents, ready for export to Google Slides.
Apple plans to add vapor chamber cooling to the M6-powered iPad Pro (expected 2027) to prevent thermal throttling during intensive professional workloads.
Amazon introduced Blue Jay, a multi-arm robot for packing, and Project Eluna, an AI assistant for managers, promising safer, faster operations.
Apple is planning to introduce search ads in Apple Maps by 2026, allowing businesses to pay for prominent placement in a major expansion of its ad business.
The European Commission has formally accused Meta and TikTok of violating the DSA by hiding illegal content reporting and obstructing access for researchers.
Microsoft Edge adds two new AI features, Copilot Actions and Journeys, enabling automated, multi-step web tasks and context-aware browsing history.
Anthropic dramatically expands its Google Cloud partnership, securing access to up to 1 million TPU accelerators and 1 GW of compute for future Claude model development.
CISA warned of two critical flaws in Veeder-Root TLS4B ATG systems. The RCE (CVE-2025-58428, CVSS 9.9) allows command injection via the SOAP interface, risking system takeover and energy disruption.
NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access
NetSupport RAT Campaign Abuses ClickFix to Infect Hosts; 3 Threat Clusters Use RMM for Covert Access
eSentire exposed a surge in NetSupport RAT campaigns using the ClickFix social engineering tactic. Three threat clusters leverage a PowerShell loader to bypass AV and gain full remote access via the RMM tool.
Dell patched three flaws in Storage Manager, including a Critical (CVSS 9.8) Auth Bypass (CVE-2025-43995) that allows remote, unauthenticated access to the Data Collector’s APIProxy.war component.
Trend Research has uncovered a highly sophisticated ransomware campaign by the Agenda group, also known as Qilin,...
Google exposed UNC6229, a Vietnam-based group running "Fake Career" phishing on job boards. They use fake lures to compromise digital advertising accounts and corporate credentials for profit.
Ubiquiti issued an urgent patch for a Critical Auth Bypass flaw in UniFi Access. Attackers with network access can fully take over door management systems.
Check Point exposed the YouTube Ghost Network, a coordinated op using 3,000+ videos (Game/Software Cracks) to spread Rhadamanthys/Lumma infostealers via fake engagement and external file hosts.
Unit 42 exposed the Smishing Triad, a PhaaS network that registered 194K+ malicious domains for global smishing. The group impersonates postal/banking services and uses Telegram for its underground market.
OpenWrt released v24.10.4 to fix two high-severity flaws: CVE-2025-62526 allows RCE via a heap buffer overflow in ubusd, and CVE-2025-62525 leaks kernel memory via a DSL driver.
Trend exposed "Premier Pass-as-a-Service," a model where Earth Estries (access broker) and Earth Naga (APT36) share compromised network access to deploy ShadowPad in a coordinated espionage campaign.
Netskope exposed a Python RAT (Nursultan Client) disguised as a Minecraft tool. It uses the Telegram Bot API for C2 to steal Discord tokens, credentials, and capture screenshots on Windows, Linux, and macOS.
HashiCorp patched two flaws in Vault: CVE-2025-11621 allows AWS Auth Bypass via IAM role collision, and CVE-2025-12044 allows unauthenticated JSON DoS attack.
CISA warned of 9 flaws in AutomationDirect PLCs. The Critical RCE (CVE-2025-61934, CVSS 10.0) allows unauthenticated file manipulation on a simulator service. Patch to v4.5.0.x immediately.